Careful What You Wish For: on the Extraction of Adversarially Trained Models

Open in new window